CVE-2021-3156-Mitigation-ShellScript-Build

CVE-2021-3156-Mitigation-ShellScript-Build Considering the Vulnerability focused in SUDO 2021 in CVE-2021-3156 this is an attempt to craete a script for process checker and if teh designated process exists then it invokes authenticationa and locks out system...

CVE-2026-17593

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

CVE-2026-17593 Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

An account holding the nexus:settings:update permission in Nexus Repository 3 or the equivalent nexus:settings permission in the legacy Nexus Repository 2 could submit arbitrary values as realm identifiers through an internal configuration API that did not validate them against the set of...

CVE-2026-17593

Nexus Repository 3 (and legacy Nexus Repository 2) is affected by CVE-2026-17593 where an account with nexus:settings:update can submit arbitrary realm identifiers via an internal configuration API that doesn’t validate against registered realms. Unrecognized entries are persisted and reread via ...

PT-2026-45248

A vulnerability was detected in unitedbyai droidclaw up to 0.5.3. The affected element is an unknown function of the file server/src/routes/pairing.ts of the component claim Endpoint. The manipulation results in improper restriction of excessive authentication attempts. The attack may be launched...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force due to improper enforcement of authentication lockout in the login process. An attacker can gain unauthorized access to accounts protected by two-factor authentication by repeatedly submitting incorrect TOTP codes without...

Brute Force

Overview Affected versions of this package are vulnerable to Brute Force due to improper enforcement of authentication lockout in the login process. An attacker can gain unauthorized access to accounts protected by two-factor authentication by repeatedly submitting incorrect TOTP codes without...

Wildfly Elytron integration susceptible to brute force attacks via CLI

Impact A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks via CLI. Patches The default behaviour has been changed in...